CVE-2024-21257: Low severity oracle hyperion bi+ vulnerability
Vulnerability in the Oracle Hyperion BI+ product of Oracle Hyperion (component: UI and Visualization). The supported version that is affected is 11.2.18.0.000. Easily exploitable vulnerability allows low privileged attacker with access to the physical communication segment attached to the hardware where the Oracle Hyperion BI+ executes to compromise Oracle Hyperion BI+. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Hyperion BI+ accessible data. CVSS 3.1 Base Score 3.0 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-21257?
CVE-2024-21257 is classified as an easily exploitable vulnerability that allows low privileged attackers to gain unauthorized access.
How do I fix CVE-2024-21257?
To mitigate CVE-2024-21257, it is recommended to apply the latest security patches provided by Oracle for version 11.2.18.0.000.
Who is affected by CVE-2024-21257?
CVE-2024-21257 affects Oracle Hyperion BI+ users running version 11.2.18.0.000.
What type of vulnerability is CVE-2024-21257?
CVE-2024-21257 is a vulnerability found in the UI and Visualization component of the Oracle Hyperion BI+ product.
What impact does CVE-2024-21257 have on systems?
CVE-2024-21257 could allow unauthorized access to sensitive data and system control to a low privileged attacker within the physical communication segment.